EDB-50136
PoCAruba Instant (IAP) - Remote Code Execution
view exploit source exploit_dbtype remoteauthor Aleph Securitypublished 2021-07-15catalog exploit_db
01
exploited CVEs (8)
Known CVEs related to this entry.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2021-25162US | high8.1 | Exploit | ||
A remote execution of arbitrary commands vulnerability was discovered in some Aruba Instant Access Point (IAP) products in version(s): Aruba Instant 6.4.x: 6.4.4.8-4.2.4.17 and bel… | ||||
| CVE-2021-25161US | medium6.1 | Exploit | ||
A remote cross-site scripting (xss) vulnerability was discovered in some Aruba Instant Access Point (IAP) products in version(s): Aruba Instant 6.4.x: 6.4.4.8-4.2.4.17 and below; A… | ||||
| CVE-2021-25160US | medium4.9 | Exploit | ||
A remote arbitrary file modification vulnerability was discovered in some Aruba Instant Access Point (IAP) products in version(s): Aruba Instant 6.4.x: 6.4.4.8-4.2.4.17 and below;… | ||||
| CVE-2021-25159US | medium6.5 | Exploit | ||
A remote arbitrary file modification vulnerability was discovered in some Aruba Instant Access Point (IAP) products in version(s): Aruba Instant 6.4.x: 6.4.4.8-4.2.4.17 and below;… | ||||
| CVE-2021-25158US | medium5.9 | Exploit | ||
A remote arbitrary file read vulnerability was discovered in some Aruba Instant Access Point (IAP) products in version(s): Aruba Instant 6.5.x: 6.5.4.18 and below; Aruba Instant 8.… | ||||
| CVE-2021-25157US | medium4.9 | Exploit | ||
A remote arbitrary file read vulnerability was discovered in some Aruba Instant Access Point (IAP) products in version(s): Aruba Instant 6.4.x: 6.4.4.8-4.2.4.17 and below; Aruba In… | ||||
| CVE-2021-25156US | medium4.9 | Exploit | ||
A remote arbitrary directory create vulnerability was discovered in some Aruba Instant Access Point (IAP) products in version(s): Aruba Instant 6.4.x: 6.4.4.8-4.2.4.17 and below; A… | ||||
| CVE-2021-25155US | medium6.5 | Exploit | ||
A remote arbitrary file modification vulnerability was discovered in some Aruba Instant Access Point (IAP) products in version(s): Aruba Instant 6.4.x: 6.4.4.8-4.2.4.17 and below;… | ||||
scry
Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.
Free scan